[PATCH 1/2] SELinux Context Label based audit filtering

Steve Grubb sgrubb at redhat.com
Fri Feb 3 15:20:14 UTC 2006


On Friday 03 February 2006 10:20, Stephen Smalley wrote:
> So is the above filter supposed to  be applied to just the terminal
> component or all of them? 

I would expect it to be the object that is actually opened rather than any 
intermediate path components.

-Steve




More information about the Linux-audit mailing list